See full changelog here.
Commits:
- AES encription with auth tag after cypher text (the order in WebCrypto etc.); upgrade GHC to 8.10.7 (#197)
- SMP commands for notifications (NKEY/NID and NSUB/NMSG) with separate queue ID and key (#199)
- simplify pending message delivery (#202)
- update transport protocol to use TLS (#204)
- change syntax for queue URI and connection request (#205)
- update SMP protocol to include server signature and encryption keys
- SMP protocol typo
- simplify RSA private key types (#207)
- GADTs for cryptographic keys (#208)
- update protocol docs (#209)
- simplex URI request
- change ports for tests (fix for ports now in use on macOS) (#217)
- remove BlockArguments extension (#220)
- Merge pull request #198 from simplex-chat/v5
- add server signature keys and DH keys for server->recipient msg bodis to SMP commands (server store log and agent tests are skipped)
- update server store log to save/restore additional keys, use Ed keys in tests instead of RSA
- add NaCl crypto_box scheme
- increase SMP queue ID and message ID size to 24 bytes
- encrypt recipient message bodies with crypto_box
- Update src/Simplex/Messaging/Agent/Client.hs
- Merge pull request #221 from simplex-chat/ep/smp-sign-encrypt
- TLS 1.3 transport (#203)
- Transaction fields for size, session IDs, refactor (#222)
- sign server responses
- create TLS ServerParams once per server run; remove tlsServerParams from agent env (fixes functional agent client for chat) (#223)
- enable WebSockets over TLS (#225)
- remove SMP server signing responses (#226)
- make WebSockets use TLS Context (#227)
- unencrypted SMP transport over TLS; simplified handshake (#229)
- use tls-unique as session ID, switch to TLS 1.2 in tls package fork (#230)
- add CODEOWNERS (#231)
- overview doc updates (#216)
- new overview (#235)
- certificate validation on client side; check stored fingerprint on server start-up; non-optional fingerprint parsing (#234, closes #155)
- base64url encode fingerprint in agent test (#237)
- chain of two certificates - offline (identity) and online; switch certificates to v3 (#238)
- update server recipes - Linode & DigitalOcean (#239)
- print version on server initialization & start-up (#240)
- add sessionId and blockSize to the client record used internally (#241)
- double ratchet algorithm implementation (#236)
- simple per-queue e2e encryption with NaCl crypto_box (#242)
- merge migrations, prepare schema for multiple queues per connection (#243)
- improve crypto key type classes (#246)
- update DB fields presentations: port, QueueStatus, RcvMsgStatus, SndMsgStatus (#244)
- binary SMP protocol encoding, split Command type to two types (#245)
- update overview (#233)
- add links to overview (#249)
- refactor server Main.hs (#248)
- make KeyHash non-optional, verify KeyHash in SMP handshake, use StrEncoding class (#250)
- amend SMP protocol doc (#232)
- remove public header from all messages, fix envelope sizes (#251)
- fix x509 call to be compatible with openssl version 1.1.1 (#253)
- add deleteMsg to agent store interface (#255)
- delete received messages after sending ACK to server (#256)
- change message envelopes and encoding, unify message delivery (#252)
- remove message statuses and unused timestamps
- test: HELLO blocking message delivery on the same server
- test: quota exceeded in one queue should not block delivery in other queues
- remove message statuses and unused timestamps (#257)
- Merge branch 'stable' into ep/message-delivery
- simplify message delivery
- Merge branch 'master' into ep/message-delivery
- Merge pull request #259 from simplex-chat/ep/message-delivery
- delete control messages after ACK to server
- Merge pull request #263 from simplex-chat/ep/delete-control-messages
- start with internal message id 1; fix id ordering in tests (#264)
- rename remaining occurrences of connection alias into connection id (#265)
- change initial migration date (migrations merged) (#267)
- integrate double ratchet into agent (#268)
- preparing v1 release
- non interactive apt commands in server recipes (#272)
- remove unnecessary separation of UnliftIO instance for ExceptT (#275)
- update Linode and DigitalOcean server recipes (#274)
- disable websockets by default (#277)
- JSON instances for ConnectionRequestUri (#276)
- update version and changelog
- note in readme
- add IP and FQDN to online certificate (#278)
- store missing port as empty string instead of NULL (#280)
- Update CHANGELOG.md
- initialize server with IP and FQDN; specify FQDN as address if provided (#279)
- remove Subject Alternative Names from server certificate (#281)
- link to smp-server by simplexchat StackScript (#282)
- remove Linode referral link (#283)
- clarify wording in Linode script comment on server address
- update readme
- reduce SMP envelope sizes (#284)
- update changelog
- correction to E2E encrypted (double ratchet) envelope size
- update README instructions on server fingerprint and address (#285)
- improve message error handling (#286)
- update changelog